Network connection method, device, storage medium, electronic device and program product for edge computing

Abstract

The present disclosure provides a network connection method, device, storage medium, electronic device and program product for edge computing. The network connection method generates target mapping relationship data between the verification failure message and the connection request message when the address verification of the connection request message sent by the edge node fails, and can respond to receiving a reset message sent by the edge node. When the reset message and the verification failure message match successfully, the method determines the connection request message corresponding to the reset message through the target mapping relationship data; and then establishes a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message. This method can effectively reduce the time delay generated by the network connection process, improve data transmission efficiency, thereby facilitating the improvement of system processing speed, and further effectively improving the user's service experience.

Description

Technical Field

[0001] The present disclosure relates to the field of network technology, and in particular, to a network connection method, device, storage medium, electronic device, and program product for edge computing. Background Art

[0002] A SYN flood attack is a common denial-of-service (DoS) or distributed denial-of-service (DDoS) attack. It exploits the three-way handshake mechanism of the TCP (Transmission Control Protocol) protocol by sending a large number of forged SYN requests to consume the target server's resources, preventing it from processing normal connection requests. Edge computing is a distributed computing model that integrates core network, computing, storage, and application capabilities at the edge of the network, close to the source of objects or data, to provide edge intelligent services locally. This approach meets the key needs of industry digitization in terms of agile connectivity, real-time services, data optimization, application intelligence, security, and privacy protection.

[0003] Current protection against SYN Flood attacks, especially during network connections in edge computing scenarios, is often prone to slow processing speeds and freezes. Summary of the Invention

[0004] This summary is provided to briefly introduce concepts that will be described in detail in the detailed description below. This summary is not intended to identify key features or essential features of the claimed technical solution, nor is it intended to limit the scope of the claimed technical solution.

[0005] In a first aspect, the present disclosure provides a network connection method for edge computing, which is applied to a network security device, the method comprising:

[0006] In the event that address verification of a connection request message sent by an edge node fails, sending a verification failure message to the edge node and generating target mapping relationship data between the verification failure message and the connection request message, wherein the verification failure message is used to instruct the edge node to send a reset message to the network security device;

[0007] In response to receiving a reset message sent by the edge node, if the reset message successfully matches the verification failure message, determining the target mapping relationship data from at least one mapping relationship data according to the reset message; different mapping relationship data correspond to different connection request messages;

[0008] Determine the connection request message corresponding to the reset message through the target mapping relationship data;

[0009] A network connection between the edge node and the edge server is established based on the connection request message corresponding to the reset message.

[0010] In a second aspect, the present disclosure provides a network connection method for edge computing, applied to an edge node, the method comprising:

[0011] Sending a connection request message to a network security device, wherein the connection request message is used to instruct the network security device to send a verification failure message to the edge node when address verification of the connection request message fails, and generate target mapping relationship data between the verification failure message and the connection request message;

[0012] In response to receiving a verification failure message sent by the network security device, a reset message is sent to the network security device, wherein the reset message is used to instruct the network security device to determine the target mapping relationship data from at least one mapping relationship data according to the reset message when the reset message successfully matches the verification failure message, determine the connection request message corresponding to the reset message through the target mapping relationship data, and establish a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message, wherein different mapping relationship data correspond to different connection request messages.

[0013] In a third aspect, the present disclosure provides a network connection device for edge computing, which is applied to network security equipment, and the device includes:

[0014] a generating module configured to, when address verification of a connection request message sent by an edge node fails, send a verification failure message to the edge node, and generate target mapping relationship data between the verification failure message and the connection request message, wherein the verification failure message is used to instruct the edge node to send a reset message to the network security device;

[0015] a first determining module configured to, in response to receiving a reset message sent by the edge node, determine the target mapping relationship data from at least one mapping relationship data according to the reset message if the reset message successfully matches the verification failure message; different mapping relationship data correspond to different connection request messages;

[0016] A second determining module is configured to determine the connection request message corresponding to the reset message through the target mapping relationship data;

[0017] The connection module is configured to establish a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message.

[0018] In a fourth aspect, the present disclosure provides a network connection device for edge computing, applied to an edge node, the device comprising:

[0019] A first sending module is configured to send a connection request message to a network security device, wherein the connection request message is used to instruct the network security device to send a verification failure message to the edge node when address verification of the connection request message fails, and generate target mapping relationship data between the verification failure message and the connection request message;

[0020] The second sending module is configured to send a reset message to the network security device in response to receiving a verification failure message sent by the network security device, wherein the reset message is used to instruct the network security device to determine the target mapping relationship data from at least one mapping relationship data according to the reset message when the reset message successfully matches the verification failure message, determine the connection request message corresponding to the reset message through the target mapping relationship data, and establish a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message, wherein different mapping relationship data correspond to different connection request messages.

[0021] In a fifth aspect, the present disclosure provides a computer-readable medium having a computer program stored thereon, which, when executed by a processing device, implements the steps of the method described in the first or second aspect above.

[0022] In a sixth aspect, the present disclosure provides an electronic device, including:

[0023] a storage device having a computer program stored thereon;

[0024] A processing device is used to execute the computer program in the storage device to implement the steps of the method described in the first aspect or the second aspect above.

[0025] In a seventh aspect, the present disclosure provides a computer program product, comprising a computer program, which, when executed by a processor, implements the steps of the method described in the first or second aspect above.

[0026] The above technical solution generates target mapping relationship data between the verification failure message and the connection request message when the address verification of the connection request message sent by the edge node fails, and can respond to the reset message sent by the edge node. When the reset message successfully matches the verification failure message, the connection request message corresponding to the reset message is determined through the target mapping relationship data; and then a network connection between the edge node and the edge server is established based on the connection request message corresponding to the reset message. This can effectively reduce the time delay generated by the network connection process and improve data transmission efficiency, which is beneficial to improving the system processing speed and can effectively improve the user's service experience.

[0027] Other features and advantages of the present disclosure will be described in detail in the following detailed description. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] The above and other features, advantages and aspects of the various embodiments of the present disclosure will become more apparent with reference to the following detailed description in conjunction with the accompanying drawings. Throughout the drawings, the same or similar reference numerals represent the same or similar elements. It should be understood that the drawings are schematic and that the originals and elements are not necessarily drawn to scale. In the drawings:

[0029] Figure 1 is a flow chart of a network connection method for edge computing shown in an exemplary embodiment of the present disclosure;

[0030] Figure 2 is a flow chart of a network connection method for edge computing shown in another exemplary embodiment of the present disclosure;

[0031] Figure 3 is a signaling interaction flow chart of a network connection method for edge computing shown in another exemplary embodiment of the present disclosure;

[0032] Figure 4 is a block diagram of a network connection device for edge computing shown in an exemplary embodiment of the present disclosure;

[0033] Figure 5 is a block diagram of a network connection device for edge computing shown in another exemplary embodiment of the present disclosure;

[0034] Figure 6 It is a block diagram of an electronic device shown in an exemplary embodiment of the present disclosure. DETAILED DESCRIPTION

[0035] The following describes embodiments of the present disclosure in more detail with reference to the accompanying drawings. Although certain embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be construed as limited to the embodiments described herein. Rather, these embodiments are provided to provide a more thorough and complete understanding of the present disclosure. It should be understood that the drawings and embodiments of the present disclosure are for illustrative purposes only and are not intended to limit the scope of protection of the present disclosure.

[0036] It should be understood that the various steps described in the method embodiments of the present disclosure may be performed in different orders and / or in parallel. In addition, the method embodiments may include additional steps and / or omit the steps shown. The scope of the present disclosure is not limited in this respect.

[0037] As used herein, the term "including" and its variations are open-ended, i.e., "including but not limited to." The term "based on" means "based, at least in part, on." The term "one embodiment" means "at least one embodiment," the term "another embodiment" means "at least one additional embodiment," and the term "some embodiments" means "at least some embodiments." Other terms are defined in the following description.

[0038] It should be noted that the concepts of "first" and "second" mentioned in this disclosure are only used to distinguish different devices, modules or units, and are not used to limit the order or interdependence of the functions performed by these devices, modules or units.

[0039] It should be noted that the modifications of "one" and "multiple" mentioned in the present disclosure are illustrative rather than restrictive, and those skilled in the art should understand that unless otherwise clearly indicated in the context, they should be understood as "one or more".

[0040] The names of the messages or information exchanged between multiple devices in the embodiments of the present disclosure are only used for illustrative purposes and are not used to limit the scope of these messages or information.

[0041] It is understandable that before using the technical solutions disclosed in the various embodiments of this disclosure, the type, scope of use, usage scenarios, etc. of the personal information involved in this disclosure should be informed to the user and the user's authorization should be obtained in an appropriate manner in accordance with relevant laws and regulations.

[0042] For example, in response to a user's active request, a prompt message is sent to the user to clearly inform the user that the operation requested will require the acquisition and use of the user's personal information. This allows the user to independently choose whether to provide personal information to the electronic device, application, server, storage medium, or other software or hardware that performs the operations of the disclosed technical solution based on the prompt message.

[0043] As an optional but non-limiting implementation, in response to receiving a user's active request, the prompt information may be sent to the user in the form of a pop-up window, in which the prompt information may be presented in text form. Furthermore, the pop-up window may also contain a selection control for the user to select "agree" or "disagree" to provide personal information to the electronic device.

[0044] It is understandable that the above notification and user authorization process are merely illustrative and do not limit the implementation of the present disclosure. Other methods that comply with relevant laws and regulations may also be applied to the implementation of the present disclosure.

[0045] At the same time, it is understood that the data involved in this technical solution (including but not limited to the data itself, the acquisition or use of the data) shall comply with the requirements of relevant laws, regulations and relevant provisions.

[0046] Before describing the specific implementation methods of the present disclosure in detail, the application scenarios of the present disclosure are first described as follows. The present disclosure can be applied to network connection processes, especially network connection processes in edge computing scenarios, such as TCP connection processes in edge computing scenarios. When connecting to a TCP node, a method for responding with incorrect acknowledgment numbers is often used to prevent SYNFlood attacks. Specifically, when an attacker, edge node A, launches an attack, they typically forge a source IP address and use it to generate a SYN (Synchronize Sequence Numbers) packet to send a connection request to the edge convergence gateway. Upon receiving the SYN packet, the edge convergence gateway, if it determines that the source IP address in the SYN packet is not a secure address, returns a SYN+ACK packet to the source IP address. Because the forged source IP address is not edge node A's, edge node A cannot receive the SYN+ACK packet and therefore cannot send a RST (Reset) packet to the edge convergence gateway in response to the SYN+ACK packet. If the edge convergence gateway does not receive the RST packet, or if the received RST packet is not a response to the intended SYN+ACK packet, it will not establish a network connection between edge node A and the edge server, thus preventing the attacker's attack. If edge node A is not an attacker, then the SYN packet sent by edge node A is its own IP address. Then edge node A can receive the SYN+ACK packet and, after receiving the SYN+ACK packet, send the correct RST packet to the edge fusion gateway. After receiving the correct RST packet, the edge fusion gateway can determine the source IP address as a safe address. Currently, after determining it as a safe address, edge node A still needs to send a SYN packet to the edge fusion gateway again and establish a TCP connection with the edge server based on the re-sent SYN packet. However, edge node A can only establish a connection with the edge computing edge server based on the re-sent SYN packet after sending the SYN packet to the edge fusion gateway again. Since data transmission is required here, delays are likely to occur, and the re-sending itself takes time. Therefore, it is obvious that the current network connection method has a certain delay, which is not conducive to improving data transmission efficiency. It is more likely to cause processing speed slowdowns, freezes, etc., and is not conducive to improving user service experience.

[0047] In order to solve the above technical problems, the present disclosure provides a network connection method, device, storage medium, electronic device and program product for edge computing. The network connection method generates target mapping relationship data between the verification failure message and the connection request message when the address verification of the connection request message sent by the edge node fails, and can respond to the reset message sent by the edge node. When the reset message and the verification failure message match successfully, the connection request message corresponding to the reset message is determined through the target mapping relationship data; and then a network connection between the edge node and the edge server is established based on the connection request message corresponding to the reset message. This can effectively reduce the time delay generated by the network connection process and improve data transmission efficiency, which is beneficial to improving the system processing speed and can effectively improve the user's service experience.

[0048] Figure 1 is a flow chart of a network connection method for edge computing shown in an exemplary embodiment of the present disclosure; Figure 1 As shown, the network connection method is applied to a network security device, and the method may include:

[0049] Step 101: When the address verification of the connection request message sent by the edge node fails, a verification failure message is sent to the edge node, and target mapping relationship data between the verification failure message and the connection request message is generated. The verification failure message is used to instruct the edge node to send a reset message to the network security device.

[0050] Among them, the connection request message can be a SYN message or a message of other protocols. When the connection request message is a SYN message, the SYN message includes a source IP address. After the network security device receives the SYN message, if it is determined that the source IP address in the SYN message belongs to a pre-stored security address, it is determined that the address verification is successful; if it is determined that the source IP address in the SYN message does not belong to a pre-stored security address, it is determined that the address verification fails.

[0051] In one possible implementation, the verification failure message may be a SYN+ACK packet returned based on the connection request message. When the seq_num (sequence number) in the SYN message is x and the ack_num (acknowledgement number) is 0, the sequence number seq_num in the verification failure message (SYN+ACK packet) is y, and the acknowledgment number ack_num is error_num, where y≠x+1.

[0052] It should be noted that after sending the verification failure message to the edge node, the edge node can generate a reset message RST based on the sequence number and confirmation number of the verification failure message, so that the sequence number seq_num of the reset message RST = error_num, that is, the value of the sequence number field of the reset message is the confirmation number error_num in the SYN+ACK packet.

[0053] In addition, the verification failure message includes a first identifier for indicating a verification failure. The implementation methods for generating the target mapping relationship data may include the following two:

[0054] One is that the connection request message includes a designated field in the message header, and uses a first key-value pair as the target mapping relationship data, the key data of the first key-value pair is the first identifier, and the value data of the first key-value pair is the designated field; wherein the first identifier can be a confirmation number in a verification failure message, or other identification data including the confirmation number field, the designated field can include at least a sequence number field and a TCP option field, and can also include other key fields, for example, one or more of a confirmation number field, a window size field, and a checksum field, etc. The TCP option is a variable-length field used to record various extended functions to enhance the functionality and flexibility of the TCP protocol.

[0055] Another method is to use a second key-value pair as the target mapping relationship data, the key data of the second key-value pair is the first identifier, and the value data of the first key-value pair is the connection request message.

[0056] Step 102: In response to receiving a reset message sent by the edge node, if the reset message successfully matches the verification failure message, determine the target mapping relationship data from at least one mapping relationship data according to the reset message; different mapping relationship data correspond to different connection request messages.

[0057] The implementation of determining whether the reset message successfully matches the verification failure message may include:

[0058] Mode 1: The reset message includes a second identifier, and when the second identifier is the sequence number of the reset message and the first identifier of the verification failure message is the confirmation number in the verification failure message, if the first identifier is the same as the second identifier, it is determined that the reset message and the verification failure message match successfully;

[0059] Method 2: When the second identifier is other identifying data including the serial number of the reset message, the serial number of the reset message is obtained from the second identifier, and a hash value is calculated using the algorithm for generating the confirmation number in the verification failure message. When the serial number of the reset message is equal to the hash value, it is determined that the reset message and the verification failure message are successfully matched. The algorithm for the confirmation number in the verification failure message can be hash(IP, port, key), that is, the IP address, source port number port, and the target key key are input into a preset hash function hash() to obtain the confirmation number in the verification failure message.

[0060] In addition, the implementation method of determining the target mapping relationship data from at least one mapping relationship data according to the reset message in this step may be:

[0061] The target mapping relationship data corresponding to the reset message is obtained by matching the second identifier in the reset message with the first identifier in the mapping relationship data, that is, the mapping relationship data with the same first identifier and the same second identifier among the plurality of mapping relationship data is used as the target mapping relationship data.

[0062] Step 103: Determine the connection request message corresponding to the reset message through the target mapping relationship data.

[0063] In one implementation, when the target mapping relationship data is a first key-value pair, the designated field can be obtained from the first key-value pair according to the first identifier; and the connection request message is generated according to the designated field.

[0064] For example, when the designated field includes a sequence number field and a TCP option field, the sequence number corresponding to the sequence number field is filled into the sequence number field in the preset format message, and the TCP option data corresponding to the TCP option field is filled into the TCP option field in the preset format message to obtain the connection request message in the preset format.

[0065] In another embodiment, when the target mapping relationship data is a second key-value pair, the connection request message is obtained from the second key-value pair according to the first identifier, that is, the value data in the second key-value pair corresponding to the target mapping relationship data is used as the connection request message.

[0066] Step 104: Establish a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message.

[0067] In this step, a connection request message corresponding to the reset message may be sent to the edge server, so that the edge server establishes a network connection with the edge node according to the connection request message.

[0068] The above technical solution generates target mapping relationship data between the verification failure message and the connection request message when the address verification of the connection request message sent by the edge node fails, and can respond to the reset message sent by the edge node. When the reset message successfully matches the verification failure message, the connection request message corresponding to the reset message is determined through the target mapping relationship data; and then a network connection between the edge node and the edge server is established based on the connection request message corresponding to the reset message. This can effectively reduce the time delay caused by the network connection process and improve data transmission efficiency, which is beneficial to improving the system processing speed and can effectively improve the user's service experience.

[0069] Optionally, the connection request message includes a source IP address, and the method may further include:

[0070] In the event that the reset message successfully matches the verification failure message, the source IP address is added to a preset whitelist.

[0071] It should be noted that, when the reset message successfully matches the verification failure message, it can be determined that the source IP address carried in the connection request message is a safe address, and therefore the source IP address can be added to a preset whitelist, which is used to store source IP addresses that have passed address verification. After being added to the preset whitelist, the next time a network connection is made, the network security device can successfully verify the address of the source IP address because the source IP address belongs to the preset whitelist. After the address verification is successful, a network connection request can be sent to the edge server, so that the edge server establishes a network connection with the edge node corresponding to the source IP address based on the network connection request, which can effectively avoid address verification through multiple data interactions, thereby effectively improving network connection efficiency.

[0072] Optionally, the method may further include:

[0073] In the case where the reset message fails to match the verification failure message, a reset confirmation message is sent to the edge node, where the reset confirmation message is used to instruct the edge node to resend the connection request message.

[0074] Wherein, when the second identifier is the sequence number of the reset message and the first identifier of the verification failure message is the confirmation number in the verification failure message, if the first identifier is different from the second identifier, it is determined that the reset message fails to match the verification failure message;

[0075] In the case where the second identifier is other identification data including the serial number of the reset message, the serial number of the reset message is obtained from the second identifier, and the hash value is calculated using the algorithm for generating the confirmation number in the verification failure message. In the case where the serial number of the reset message is not equal to the hash value, it is determined that the reset message fails to match the verification failure message.

[0076] It should be noted that the reset message fails to match the verification failure message, indicating that the current reset message may be a message fabricated by an attacker, the source IP address is an unsafe address, and the edge node cannot establish a network connection with the edge server through the current source IP address.

[0077] The above technical solutions can effectively reduce the time delay caused by the network connection process and improve data transmission efficiency, which is conducive to improving the content loading speed and can effectively improve the user's service experience.

[0078] Figure 2 is a flow chart of a network connection method for edge computing shown in another exemplary embodiment of the present disclosure; Figure 2 As shown, the network connection method is applied to an edge node, and the method may include:

[0079] Step 201: Send a connection request message to a network security device. The connection request message is used to instruct the network security device to send a verification failure message to the edge node when the address verification of the connection request message fails, and generate target mapping relationship data between the verification failure message and the connection request message.

[0080] The connection request message can be a SYN message or a message of other protocols. The network security device can refer to the implementation of the address verification process of the connection request message and the generation of the target mapping relationship data between the verification failure message and the connection request message. Figure 1 The relevant description in step 101 will not be repeated here in this disclosure.

[0081] Step 202: In response to receiving a verification failure message sent by the network security device, a reset message is sent to the network security device, wherein the reset message is used to instruct the network security device to determine the target mapping relationship data from at least one mapping relationship data according to the reset message when the reset message successfully matches the verification failure message, determine the connection request message corresponding to the reset message through the target mapping relationship data, and establish a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message.

[0082] Different mapping relationship data corresponds to different connection request messages.

[0083] In this step, the verification failure message can be a SYN+ACK packet returned based on the connection request message. If the seq_num (sequence number) in the SYN message is x and the ack_num (acknowledgement number) is 0, the sequence number seq_num in the verification failure message (SYN+ACK packet) is y, and the acknowledgment number ack_num is error_num, where y ≠ x + 1. After sending the verification failure message to the edge node, the edge node can generate a reset message RST based on the sequence number and acknowledgment number of the verification failure message, setting the sequence number seq_num of the reset message to error_num. That is, the value of the sequence number field of the reset message is the acknowledgment number error_num in the SYN+ACK packet.

[0084] In addition, in this step, when the reset message matches the verification failure message successfully, the network security device determines the target mapping relationship data from at least one mapping relationship data according to the reset message. Figure 1 The relevant description in step 102 will not be repeated here in this disclosure.

[0085] The implementation method of determining the connection request message corresponding to the reset message through the target mapping relationship data in this step can refer to Figure 1 The relevant description in step 103 is not repeated here in this disclosure.

[0086] In this step, the implementation method of establishing the network connection between the edge node and the edge server based on the connection request message corresponding to the reset message can refer to Figure 1 The relevant description in step 104 will not be repeated here in this disclosure.

[0087] The above technical solution sends a connection request message to the network security device through the edge node, so that the network security device sends a verification failure message to the edge node when the address verification of the connection request message fails, and generates target mapping relationship data between the verification failure message and the connection request message, and enables the edge node to send a reset message to the network security device in response to receiving the verification failure message sent by the network security device. The reset message is used to instruct the network security device to determine the target mapping relationship data from at least one mapping relationship data according to the reset message when the reset message successfully matches the verification failure message, determine the connection request message corresponding to the reset message through the target mapping relationship data, and establish a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message. This can effectively reduce the time delay generated by the network connection process and improve data transmission efficiency, thereby facilitating the improvement of system processing speed and effectively improving the user's service experience.

[0088] Figure 3 This is a signaling interaction flow chart of a network connection method for edge computing shown in another exemplary embodiment of the present disclosure. Figure 3 As shown, the network connection method includes:

[0089] Step 301: The edge node sends a connection request message to a network security device.

[0090] The connection request message (SYN message) has a seq_num (sequence number) of x and an ack_num (acknowledgement number) of 0. The connection request message includes a source IP address. The network security device may be an edge convergence gateway, which is used to provide network connectivity and security for edge computing and networking services.

[0091] Step 302: The network security device performs address verification on the connection request message and determines whether the verification is successful.

[0092] If it is determined that the address verification fails, steps 303a and 303b are executed; if it is determined that the address verification succeeds, step 307 is executed and the network security device forwards the connection request message to the edge server.

[0093] Step 303a: Send a verification failure message to the edge node.

[0094] Among them, when the seq_num (sequence number) of the connection request message is x and the ack_num (acknowledgement number) is 0, the confirmation number ACK of the verification failure message SYN+ACK is error_num. The error_num can be determined by hash(IP, port, key), that is, the IP address, source port number port and the target key key are input into the preset hash function hash() to obtain the confirmation number ACK in the verification failure message.

[0095] Step 303b: Generate target mapping relationship data between the verification failure message and the connection request message.

[0096] The implementation of this step can refer to Figure 1 The relevant description in step 101 will not be repeated here in this disclosure.

[0097] Step 304: In response to receiving the verification failure message, the edge node sends a reset message to the network security device.

[0098] In which, when the sequence number seq_num of the verification failure message is y and the confirmation number ack_num is error_num, the sequence number seq_num of the reset message RST is error_num and the confirmation number ack_num is 0.

[0099] Step 305: In response to receiving the reset message sent by the edge node, the network security device determines whether the reset message successfully matches the verification failure message.

[0100] If it is determined that the reset message matches the verification failure message successfully, step 306 is executed. Optionally, if the reset message fails to match the verification failure message, a reset confirmation message is sent to the edge node, the reset confirmation message being used to instruct the edge node to resend the connection request message.

[0101] It should be noted that, when the seq_num of the reset message is consistent with the confirmation number error_num in the verification failure message, it is determined that the reset message matches the verification failure message successfully; otherwise, the matching fails.

[0102] Step 306: Determine the connection request message corresponding to the reset message through the target mapping relationship data.

[0103] Step 307: The network security device sends the connection request message to the edge server.

[0104] In step 308 , the edge server establishes a network connection with the edge node according to the connection request message, and sends a connection confirmation message to the edge node.

[0105] Among them, when the seq_num (sequence number) of the connection request message is x and the ack_num (acknowledgement number) is 0, the confirmation number ACK of the connection confirmation message SYN+ACK is x+1.

[0106] Step 309: In response to receiving the connection confirmation message, the edge node sends a connection feedback message to the edge server.

[0107] Among them, when the seq_num (sequence number) of the connection request message is x, the ack_num (acknowledgement number) is 0, the confirmation number ACK of the connection confirmation message SYN+ACK is x+1, and the sequence number is z, the sequence number of the connection feedback message is x+1, and the confirmation number is z+1.

[0108] The above technical solution generates target mapping relationship data between the verification failure message and the connection request message when the address verification of the connection request message sent by the edge node fails, and can respond to the reset message sent by the edge node. When the reset message successfully matches the verification failure message, the connection request message corresponding to the reset message is determined through the target mapping relationship data; and then a network connection between the edge node and the edge server is established based on the connection request message corresponding to the reset message. This can effectively reduce the time delay generated by the network connection process and improve data transmission efficiency, which is conducive to improving the content loading speed and can effectively improve the user's service experience.

[0109] Figure 4 This is a block diagram of a network connection device for edge computing according to an exemplary embodiment of the present disclosure. The network connection device is applied to network security equipment and may include:

[0110] A generating module 401 is configured to, when address verification of a connection request message sent by an edge node fails, send a verification failure message to the edge node, and generate target mapping relationship data between the verification failure message and the connection request message, wherein the verification failure message is used to instruct the edge node to send a reset message to the network security device;

[0111] A first determining module 402 is configured to, in response to receiving a reset message sent by the edge node, determine the target mapping relationship data from at least one mapping relationship data according to the reset message if the reset message successfully matches the verification failure message; different mapping relationship data correspond to different connection request messages;

[0112] A second determining module 403 is configured to determine the connection request message corresponding to the reset message through the target mapping relationship data;

[0113] The connection module 404 is configured to establish a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message.

[0114] Optionally, the verification failure message includes a first identifier for indicating verification failure, the reset message includes a second identifier, and the first determining module 402 is configured to:

[0115] When the first identifier is the same as the second identifier, it is determined that the reset message matches the verification failure message successfully.

[0116] Optionally, the generating module 401 is configured to generate target mapping relationship data between the first identifier and the connection request message.

[0117] Optionally, the connection request message includes a specified field in a message header, and the generating module 401 is configured to:

[0118] A first key-value pair is used as the target mapping relationship data, the key data of the first key-value pair is the first identifier, and the value data of the first key-value pair is the designated field.

[0119] Optionally, the second determining module 403 is configured to:

[0120] The designated field is obtained from the first key-value pair according to the first identifier; and the connection request message is generated according to the designated field.

[0121] Optionally, the generating module 401 is configured to:

[0122] A second key-value pair is used as the target mapping relationship data, the key data of the second key-value pair is the first identifier, and the value data of the first key-value pair is the connection request message.

[0123] Optionally, the second determining module 403 is configured to:

[0124] The connection request message is obtained from the second key-value pair according to the first identifier.

[0125] Optionally, the connection request message includes a source IP address, and the apparatus may further include:

[0126] The whitelist updating module is configured to add the source IP address to a preset whitelist if the reset message successfully matches the verification failure message.

[0127] Optionally, the device may further include:

[0128] The third sending module is configured to send a reset confirmation message to the edge node when the reset message fails to match the verification failure message, wherein the reset confirmation message is used to instruct the edge node to resend the connection request message.

[0129] Optionally, the connection module 404 is configured to:

[0130] A connection request message corresponding to the reset message is sent to the edge server, so that the edge server establishes a network connection with the edge node according to the connection request message.

[0131] The above technical solutions can effectively reduce the time delay caused by the network connection process and improve data transmission efficiency, which is conducive to improving the content loading speed and can effectively improve the user's service experience.

[0132] Figure 5 This is a block diagram of a network connection device for edge computing shown in another exemplary embodiment of the present disclosure. The network connection device is applied to an edge node, and the device may include:

[0133] A first sending module 501 is configured to send a connection request message to a network security device, wherein the connection request message is used to instruct the network security device to send a verification failure message to the edge node when address verification of the connection request message fails, and generate target mapping relationship data between the verification failure message and the connection request message;

[0134] The second sending module 502 is configured to send a reset message to the network security device in response to receiving a verification failure message sent by the network security device, wherein the reset message is used to instruct the network security device to determine the target mapping relationship data from at least one mapping relationship data according to the reset message when the reset message successfully matches the verification failure message, determine the connection request message corresponding to the reset message through the target mapping relationship data, and establish a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message, wherein different mapping relationship data corresponds to different connection request messages.

[0135] The above technical solution sends a connection request message to the network security device through the first sending module 501, so that the network security device sends a verification failure message to the edge node when the address verification of the connection request message fails, and generates target mapping relationship data between the verification failure message and the connection request message, and enables the edge node to send a reset message to the network security device in response to receiving the verification failure message sent by the network security device through the second sending module 502. The reset message is used to instruct the network security device to determine the target mapping relationship data from at least one mapping relationship data according to the reset message when the reset message successfully matches the verification failure message, determine the connection request message corresponding to the reset message through the target mapping relationship data, and establish a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message, which can effectively reduce the time delay generated by the network connection process and improve data transmission efficiency, thereby facilitating the improvement of content loading speed, and thus effectively improving the user's service experience.

[0136] Another exemplary embodiment of the present disclosure provides a computer-readable medium having a computer program stored thereon, which implements the above Figures 1 to 3 Any of the steps of the method.

[0137] Yet another exemplary embodiment of the present disclosure provides an electronic device, including:

[0138] a storage device having a computer program stored thereon;

[0139] Processing means for executing the computer program in the storage means to achieve the above Figures 1 to 3 Any of the steps of the method.

[0140] Another exemplary embodiment of the present disclosure provides a computer program product, including a computer program, which implements the above when executed by a processor. Figures 1 to 3 Any of the steps of the method.

[0141] Reference below Figure 6 , which shows a schematic structural diagram of an electronic device 600 suitable for implementing an embodiment of the present disclosure. The terminal device in the embodiment of the present disclosure may include, but is not limited to, mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (personal digital assistants), PADs (tablet computers), PMPs (portable multimedia players), in-vehicle terminals (such as in-vehicle navigation terminals), and fixed terminals such as digital TVs and desktop computers. Figure 6 The electronic device shown is only an example and should not limit the functions and scope of use of the embodiments of the present disclosure.

[0142] like Figure 6 As shown, electronic device 600 may include a processing device (e.g., a central processing unit, a graphics processing unit, etc.) 601, which can perform various appropriate actions and processes according to programs stored in a read-only memory (ROM) 602 or programs loaded from a storage device 608 into a random access memory (RAM) 603. RAM 603 also stores various programs and data required for the operation of electronic device 600. Processing device 601, ROM 602, and RAM 603 are interconnected via a bus 604. An input / output (I / O) interface 605 is also connected to bus 604.

[0143] Typically, the following devices may be connected to the I / O interface 605: an input device 606 including, for example, a touch screen, a touchpad, a keyboard, a mouse, a camera, a microphone, an accelerometer, a gyroscope, etc.; an output device 607 including, for example, a liquid crystal display (LCD), a speaker, a vibrator, etc.; a storage device 608 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 609. The communication device 609 may allow the electronic device 600 to communicate with other devices wirelessly or by wire to exchange data. Figure 6 The electronic device 600 is shown with various devices, but it should be understood that it is not required to implement or possess all of the devices shown. More or fewer devices may be implemented or possessed instead.

[0144] In particular, according to an embodiment of the present disclosure, the process described above with reference to the flowchart can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program carried on a non-transitory computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from the network through the communication device 609, or installed from the storage device 608, or installed from the ROM 602. When the computer program is executed by the processing device 601, the above-mentioned functions defined in the method of the embodiment of the present disclosure are performed.

[0145] It should be noted that the computer-readable medium described above in the present disclosure may be a computer-readable signal medium or a computer-readable storage medium, or any combination thereof. Computer-readable storage media may include, for example, but not limited to, electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices, or components, or any combination thereof. More specific examples of computer-readable storage media may include, but are not limited to, an electrical connection having one or more conductors, a portable computer disk, a hard disk, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, apparatus, or device. In the present disclosure, a computer-readable signal medium may include a data signal propagated in baseband or as part of a carrier wave, carrying computer-readable program code. Such a propagated data signal may take a variety of forms, including, but not limited to, electromagnetic signals, optical signals, or any suitable combination thereof. A computer-readable signal medium may also be any computer-readable medium other than a computer-readable storage medium that can transmit, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device. Program code embodied on a computer-readable medium may be transmitted using any suitable medium, including but not limited to wire, optical cable, RF (radio frequency), or any suitable combination thereof.

[0146] In some embodiments, the client and server can communicate using any currently known or later developed network protocol, such as HTTP (HyperText Transfer Protocol), and can be interconnected with any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include a local area network ("LAN"), a wide area network ("WAN"), an internet (e.g., the Internet), and a peer-to-peer network (e.g., an ad hoc peer-to-peer network), as well as any currently known or later developed network.

[0147] The computer-readable medium may be included in the electronic device, or may exist independently without being incorporated into the electronic device.

[0148] The computer-readable medium carries one or more programs. When the one or more programs are executed by the electronic device, the electronic device: when address verification of a connection request message sent by an edge node fails, sends a verification failure message to the edge node, and generates target mapping relationship data between the verification failure message and the connection request message, wherein the verification failure message is used to instruct the edge node to send a reset message to the network security device;

[0149] In response to receiving a reset message sent by the edge node, if the reset message successfully matches the verification failure message, the target mapping relationship data is determined from at least one mapping relationship data according to the reset message; different mapping relationship data correspond to different connection request messages; the connection request message corresponding to the reset message is determined through the target mapping relationship data; and a network connection between the edge node and the edge server is established based on the connection request message corresponding to the reset message.

[0150] Alternatively, the computer-readable medium carries one or more programs, and when the one or more programs are executed by the electronic device, the electronic device: sends a connection request message to the network security device, wherein the connection request message is used to instruct the network security device to send a verification failure message to the edge node when the address verification of the connection request message fails, and generate target mapping relationship data between the verification failure message and the connection request message; in response to receiving the verification failure message sent by the network security device, sends a reset message to the network security device, wherein the reset message is used to instruct the network security device to determine the target mapping relationship data from at least one mapping relationship data according to the reset message when the reset message successfully matches the verification failure message, determine the connection request message corresponding to the reset message through the target mapping relationship data, and establish a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message, wherein different mapping relationship data correspond to different connection request messages.

[0151] Computer program code for performing the operations of the present disclosure may be written in one or more programming languages, or a combination thereof, including, but not limited to, object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a stand-alone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving a remote computer, the remote computer may be connected to the user's computer via any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0152] The flowcharts and block diagrams in the accompanying drawings illustrate the possible implementation architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each box in the flowchart or block diagram can represent a module, program segment, or a part of code, and the module, program segment, or a part of code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order than that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flowchart, and the combination of the boxes in the block diagram and / or flowchart, can be implemented with a dedicated hardware-based system that performs the specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0153] The modules described in the embodiments of the present disclosure may be implemented in software or hardware. The name of a module does not, in some cases, limit the module itself. For example, the first determination module may also be described as "in response to receiving a reset message sent by the edge node, if the reset message successfully matches the verification failure message, determining the target mapping relationship data from at least one mapping relationship data according to the reset message; different mapping relationship data correspond to different connection request messages."

[0154] The functions described above herein may be performed, at least in part, by one or more hardware logic components. For example, and without limitation, exemplary types of hardware logic components that may be used include: field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), and the like.

[0155] In the context of the present disclosure, a machine-readable medium may be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, apparatus, or device. A machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. More specific examples of machine-readable storage media may include an electrical connection based on one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), optical fibers, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0156] According to one or more embodiments of the present disclosure, Example 1 provides a network connection method for edge computing, which is applied to a network security device. The method includes:

[0157] In the event that address verification of a connection request message sent by an edge node fails, sending a verification failure message to the edge node and generating target mapping relationship data between the verification failure message and the connection request message, wherein the verification failure message is used to instruct the edge node to send a reset message to the network security device;

[0158] In response to receiving a reset message sent by the edge node, if the reset message successfully matches the verification failure message, determining the target mapping relationship data from at least one mapping relationship data according to the reset message; different mapping relationship data correspond to different connection request messages;

[0159] Determine the connection request message corresponding to the reset message through the target mapping relationship data;

[0160] A network connection between the edge node and the edge server is established based on the connection request message corresponding to the reset message.

[0161] According to one or more embodiments of the present disclosure, Example 2 provides the method of Example 1, wherein the verification failure message includes a first identifier for indicating a verification failure, the reset message includes a second identifier, and the reset message successfully matches the verification failure message including:

[0162] When the first identifier is the same as the second identifier, it is determined that the reset message matches the verification failure message successfully.

[0163] According to one or more embodiments of the present disclosure, Example 3 provides the method of Example 2, wherein generating target mapping relationship data between the verification failure message and the connection request message includes:

[0164] Generate target mapping relationship data between the first identifier and the connection request message.

[0165] According to one or more embodiments of the present disclosure, Example 4 provides the method of Example 3, wherein the connection request message includes a specified field in a message header, and generating target mapping relationship data between the first identifier and the connection request message includes:

[0166] A first key-value pair is used as the target mapping relationship data, the key data of the first key-value pair is the first identifier, and the value data of the first key-value pair is the designated field.

[0167] According to one or more embodiments of the present disclosure, Example 5 provides the method of Example 4, wherein determining the connection request message corresponding to the reset message by using the target mapping relationship data includes:

[0168] Acquire the designated field from the first key-value pair according to the first identifier;

[0169] The connection request message is generated according to the designated field.

[0170] According to one or more embodiments of the present disclosure, Example 6 provides the method of Example 4, wherein generating target mapping relationship data between the first identifier and the connection request message includes:

[0171] A second key-value pair is used as the target mapping relationship data, the key data of the second key-value pair is the first identifier, and the value data of the first key-value pair is the connection request message.

[0172] According to one or more embodiments of the present disclosure, Example 7 provides the method of Example 6, wherein determining the connection request message corresponding to the reset message by using the target mapping relationship data includes:

[0173] The connection request message is obtained from the second key-value pair according to the first identifier.

[0174] According to one or more embodiments of the present disclosure, Example 8 provides the method of Example 1, wherein the connection request packet includes a source IP address, and the method further includes:

[0175] In the event that the reset message successfully matches the verification failure message, the source IP address is added to a preset whitelist.

[0176] According to one or more embodiments of the present disclosure, Example 9 provides the method of Example 1, further comprising:

[0177] In the case where the reset message fails to match the verification failure message, a reset confirmation message is sent to the edge node, where the reset confirmation message is used to instruct the edge node to resend the connection request message.

[0178] According to one or more embodiments of the present disclosure, Example 10 provides the method of any one of Examples 1 to 9, wherein establishing a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message includes:

[0179] A connection request message corresponding to the reset message is sent to the edge server, so that the edge server establishes a network connection with the edge node according to the connection request message.

[0180] According to one or more embodiments of the present disclosure, Example 11 provides a network connection method, applied to an edge node, the method including:

[0181] Sending a connection request message to a network security device, wherein the connection request message is used to instruct the network security device to send a verification failure message to the edge node when address verification of the connection request message fails, and generate target mapping relationship data between the verification failure message and the connection request message;

[0182] In response to receiving a verification failure message sent by the network security device, a reset message is sent to the network security device, wherein the reset message is used to instruct the network security device to determine the target mapping relationship data from at least one mapping relationship data according to the reset message when the reset message successfully matches the verification failure message, determine the connection request message corresponding to the reset message through the target mapping relationship data, and establish a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message, wherein different mapping relationship data correspond to different connection request messages.

[0183] According to one or more embodiments of the present disclosure, Example 12 provides a network connection device for edge computing, which is applied to a network security device, and includes:

[0184] a generating module configured to, when address verification of a connection request message sent by an edge node fails, send a verification failure message to the edge node, and generate target mapping relationship data between the verification failure message and the connection request message, wherein the verification failure message is used to instruct the edge node to send a reset message to the network security device;

[0185] a first determining module configured to, in response to receiving a reset message sent by the edge node, determine the target mapping relationship data from at least one mapping relationship data according to the reset message if the reset message successfully matches the verification failure message; different mapping relationship data correspond to different connection request messages;

[0186] A second determining module is configured to determine the connection request message corresponding to the reset message through the target mapping relationship data;

[0187] The connection module is configured to establish a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message.

[0188] According to one or more embodiments of the present disclosure, Example 13 provides a network connection device, applied to an edge node, comprising:

[0189] A first sending module is configured to send a connection request message to a network security device, wherein the connection request message is used to instruct the network security device to send a verification failure message to the edge node when address verification of the connection request message fails, and generate target mapping relationship data between the verification failure message and the connection request message;

[0190] The second sending module is configured to send a reset message to the network security device in response to receiving a verification failure message sent by the network security device, wherein the reset message is used to instruct the network security device to determine the target mapping relationship data from at least one mapping relationship data according to the reset message when the reset message successfully matches the verification failure message, determine the connection request message corresponding to the reset message through the target mapping relationship data, and establish a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message, wherein different mapping relationship data correspond to different connection request messages.

[0191] According to one or more embodiments of the present disclosure, Example 14 provides a computer-readable medium having a computer program stored thereon, which implements the steps of the method described in any one of Examples 1-11 when executed by a processing device.

[0192] According to one or more embodiments of the present disclosure, Example 15 provides an electronic device, including:

[0193] a storage device having a computer program stored thereon;

[0194] A processing device is used to execute the computer program in the storage device to implement the steps of the method described in any one of Examples 1-11.

[0195] According to one or more embodiments of the present disclosure, Example 16 provides a computer program product, including a computer program, which implements the steps of any one of the methods of Examples 1-11 when executed by a processor.

[0196] The above description is merely a preferred embodiment of the present disclosure and an illustration of the technical principles employed. Those skilled in the art should understand that the scope of the present disclosure is not limited to technical solutions formed by specific combinations of the aforementioned technical features. It also encompasses other technical solutions formed by any combination of the aforementioned technical features or their equivalents, without departing from the scope of the above disclosure. For example, a technical solution formed by replacing the aforementioned features with (but not limited to) technical features with similar functions disclosed in this disclosure.

[0197] In addition, although each operation is described in a specific order, this should not be understood as requiring these operations to be performed in the specific order shown or in a sequential order. Under certain circumstances, multitasking and parallel processing may be advantageous. Similarly, although some specific implementation details have been included in the above discussion, these should not be interpreted as limiting the scope of the present disclosure. Some features described in the context of a separate embodiment can also be implemented in a single embodiment in combination. On the contrary, the various features described in the context of a single embodiment can also be implemented in multiple embodiments individually or in any suitable sub-combination mode.

[0198] Although the subject matter has been described using language specific to structural features and / or methodological logical acts, it should be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or acts described above. Rather, the specific features and acts described above are merely example forms of implementing the claims. Regarding the apparatus in the above-described embodiments, the specific manner in which each module performs operations has been described in detail in the embodiments related to the method and will not be elaborated upon here.

Claims

1. A network connection method for edge computing, characterized in that: Applied to network security equipment, the method includes: In the event that address verification of a connection request message sent by an edge node fails, sending a verification failure message to the edge node and generating target mapping relationship data between the verification failure message and the connection request message, wherein the verification failure message is used to instruct the edge node to send a reset message to the network security device; In response to receiving a reset message sent by the edge node, if the reset message successfully matches the verification failure message, determining the target mapping relationship data from at least one mapping relationship data according to the reset message; different mapping relationship data correspond to different connection request messages; Determine the connection request message corresponding to the reset message through the target mapping relationship data; A network connection between the edge node and the edge server is established based on the connection request message corresponding to the reset message.

2. The method according to claim 1, characterized in that The verification failure message includes a first identifier for indicating a verification failure, the reset message includes a second identifier, and the reset message successfully matches the verification failure message including: When the first identifier is the same as the second identifier, it is determined that the reset message matches the verification failure message successfully.

3. The method according to claim 2, characterized in that The target mapping relationship data for generating the verification failure message and the connection request message includes: Generate target mapping relationship data between the first identifier and the connection request message.

4. The method according to claim 3, characterized in that The connection request message includes a specified field in a message header, and the generating of target mapping relationship data between the first identifier and the connection request message includes: A first key-value pair is used as the target mapping relationship data, the key data of the first key-value pair is the first identifier, and the value data of the first key-value pair is the designated field.

5. The method according to claim 4, characterized in that The determining, by using the target mapping relationship data, a connection request message corresponding to the reset message includes: Acquire the designated field from the first key-value pair according to the first identifier; The connection request message is generated according to the designated field.

6. The method according to claim 4, characterized in that The generating target mapping relationship data between the first identifier and the connection request message includes: A second key-value pair is used as the target mapping relationship data, the key data of the second key-value pair is the first identifier, and the value data of the first key-value pair is the connection request message.

7. The method according to claim 6, characterized in that The determining, by using the target mapping relationship data, a connection request message corresponding to the reset message includes: The connection request message is obtained from the second key-value pair according to the first identifier.

8. The method according to claim 1, characterized in that The connection request message includes a source IP address, and the method further includes: In the event that the reset message successfully matches the verification failure message, the source IP address is added to a preset whitelist.

9. The method according to claim 1, characterized in that The method further comprises: In the case that the reset message fails to match the verification failure message, a reset confirmation message is sent to the edge node, where the reset confirmation message is used to instruct the edge node to resend the connection request message.

10. The method according to any one of claims 1 to 9, characterized in that The establishing a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message includes: A connection request message corresponding to the reset message is sent to the edge server, so that the edge server establishes a network connection with the edge node according to the connection request message.

11. A network connection method for edge computing, characterized in that: Applied to an edge node, the method includes: Sending a connection request message to a network security device, wherein the connection request message is used to instruct the network security device to send a verification failure message to the edge node when address verification of the connection request message fails, and generate target mapping relationship data between the verification failure message and the connection request message; In response to receiving a verification failure message sent by the network security device, a reset message is sent to the network security device, wherein the reset message is used to instruct the network security device to determine the target mapping relationship data from at least one mapping relationship data according to the reset message when the reset message successfully matches the verification failure message, determine the connection request message corresponding to the reset message through the target mapping relationship data, and establish a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message, wherein different mapping relationship data correspond to different connection request messages.

12. A network connection device for edge computing, characterized in that: Applied to network security equipment, the device includes: a generating module configured to, when address verification of a connection request message sent by an edge node fails, send a verification failure message to the edge node, and generate target mapping relationship data between the verification failure message and the connection request message, wherein the verification failure message is used to instruct the edge node to send a reset message to the network security device; a first determining module configured to, in response to receiving a reset message sent by the edge node, determine the target mapping relationship data from at least one mapping relationship data according to the reset message if the reset message successfully matches the verification failure message; different mapping relationship data correspond to different connection request messages; A second determining module is configured to determine the connection request message corresponding to the reset message through the target mapping relationship data; The connection module is configured to establish a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message.

13. A network connection device for edge computing, characterized in that: Applied to an edge node, the device includes: A first sending module is configured to send a connection request message to a network security device, wherein the connection request message is used to instruct the network security device to send a verification failure message to the edge node when address verification of the connection request message fails, and generate target mapping relationship data between the verification failure message and the connection request message; The second sending module is configured to send a reset message to the network security device in response to receiving a verification failure message sent by the network security device, wherein the reset message is used to instruct the network security device to determine the target mapping relationship data from at least one mapping relationship data according to the reset message when the reset message successfully matches the verification failure message, determine the connection request message corresponding to the reset message through the target mapping relationship data, and establish a network connection between the edge node and the edge server based on the connection request message corresponding to the reset message, wherein different mapping relationship data correspond to different connection request messages.

14. A computer-readable medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processing device, the steps of the method according to any one of claims 1 to 11 are implemented.

15. An electronic device, characterized in that: include: a storage device having a computer program stored thereon; A processing device, configured to execute the computer program in the storage device to implement the steps of the method according to any one of claims 1 to 11.

16. A computer program product comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 11 are implemented.

Images